|
|

Reduce Risk and Address Compliance Requirements Imposed by the SEC, NASD, HIPAA, and Sarbanes-Oxley.
Organizations are under more pressure than ever before to manage their fixed content-including images, faxes, e-mail, and PDF’s,
not only for compliance and risk reduction purposes, but also to improve operational productivity while decreasing costs.
Government regulations such as HIPAA, SOX and the GLB Act require changes to many network security infrastructures and IT procedures.
The Health Insurance Portability and Accountability Act (HIPAA)
The Health Insurance Portability and Accountability Act of 1996 imposes national standards for securing and
maintaining the privacy of medical data involved in electronic health care transactions. The Act affects the computer networks of
doctors’ offices, hospitals, health insurance companies, public health organizations, employers, and any organization that deals with
medical records and health care information pertaining to individual patients that is stored or transferred in electronic form.
The Gramm-Leach-Bliley Act (GLB)
The Financial Modernization Act of 1999 is more commonly known as the Gramm-Leach-Bliley (GLB) Act, after
the names of its sponsors, Senator Phil Gramm and Representatives Jim Leach and Thomas Bliley. It applies to financial institutions
and organizations that work with OPM (Other People’s Money) such as banks, brokerage firms, consumer credit reporting agencies and
credit counseling services, debt collection agencies, real estate transaction settlement services and even income tax preparers. If you
work in the IT department of any of these companies, you’re required to comply with GLB’s information security requirements.
The Sarbanes-Oxley Act (SOX)
The U.S. Public Company Accounting Reform and Investor Protection Act of 2002 is often referred to as the
Sarbanes-Oxley Act after the names of Senator Paul Sarbanes and Representative Michael Oxley, who authored the bill. It is more informally
called SOX. The law was proposed and passed in response to the slew of accounting scandals involving large corporations such as Enron,
WorldCom and Tyco. The purpose is to enforce standards that ensure accuracy of financial statements filed by publicly traded companies.
Sections 302 and 404 are the portions of the Act that most affect the IT departments of those companies. All
companies registered or with a pending registration under the Securities Act of 1993 must comply. This includes foreign companies that are
registered on the U.S. stock exchanges. These sections require yearly certification of internal controls, as verified by an independent
auditor. Lack of security of financial data that could result in financial misrepresentation is a violation of the Act and could subject
the company to fines and, even more importantly, can subject those responsible to imprisonment – even if there is no intent to misrepresent.
This makes the security of this type of data of utmost importance. Companies are required to establish an infrastructure
that will keep the data safe from any unauthorized access or alteration, damage or loss.
We offer solutions that give organizations the power to manage and secure all of their fixed content throughout
the information lifecycle management (ILM) stages, with an integrated and scalable set of tools that are easy to deploy and even easier to use.
How We Can Help
Our DAS Consultants will prepare a Needs Analysis statement based on your business requirements.
We have a variety of solutions for all types of business - large and small.
Call us at 888-395-6396 or email us for a No Cost, No Obligation Consultation.
© 2009 CD Dimensions Inc All rights reserved.
|